On which Cisco can I raise a permanent VPN?

Question

System administration

There are two remote offices, there is a 100 Mbit channel, there are two white IPs using IPoE technology. It is necessary to lift constant VPN between two offices. Mikrotik is not considered, because in the future everything will be on Cisco. Tell me, who has already dealt with them, on which models it will be possible to raise a permanent channel between them?

Answer 1

there are two options: a router or a firewall , then
you decide what suits your tasks
best
. those. if you need to load 100 meters in both directions, then according to the cissian math, it’s already 200 meters
here, either take the 4351 model or buy in addition to the 4331 perfomance license for 300M (it’s right to use, so if your conscience allows you to save money)
in addition to IPSec, get standard routing chips: dynamics, PBR, VRF, QoS, etc.
plus, the entire ISR series is capable of telephony
2. the simplest firewall is enough FPR1010-NGFW-K9
he will drag the same 300 meters as 4331 with a license
, while additionally get a stateful firewall, IPS and other security features if they are needed (most by subscription)
ps. the router works under IOS-XE and the same OS is used on all catalyst switches (this is a question about everything in the future on cisco)
, but in firewalls everything is wrong
there ASA or FXOS

Answer 2

Buying a whole tsiska for the sake of one vpn is somehow strange. I think that first you need to sketch out a plan "what will happen later" and fit the piece of iron that will terminate the vpn into it. Maybe it will be more organic to raise a tunnel from some Linux, for example. And so 100 megabits can and EOL ASA5510, not to mention the more recent ones.